When adding an ApplicationListener to an ApplicationLoadBalancer the sslPolicy can be configured. However when using an ApplicationLoadBalancedFargateService or an ApplicationLoadBalancedEc2Service the construct automatically adds the listener and there is no option to configure the sslPolicy.

I worked around this feature gap by extending ApplicationLoadBalancer and overriding the addListener method to add the sslPolicy flag but this should be an option in an ApplicationLoadBalancedService

Use Case

Be able to configure the ApplicationLoadBalancer in an ApplicationLoadBalancedFargateService to use a different sslPolicy such as only allowing TLS1.2 connections

Proposed Solution

Add the sslPolicy property to ApplicationLoadBalancedServiceBaseProps and use the property when calling loadBalancer.addListener in ApplicationLoadBalancedServiceBase

Other

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

This is a 🚀 Feature Request